It was referring to the 2nd question, which you kind of answered. I can live without disabling password check until 4.9 comes out, and then will investigate whether performance hit is worth it.
My more pressing question is the first one, is there an ability to change the “Strong” password policy?